JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 88.216.39.25

88.216.39.25 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	UAB Nacionalinis Telekomunikaciju Tinklas
Usage Type	Data Center/Web Hosting/Transit
ASN	AS204770
Hostname(s)	ip-88-216-39-25.004.ptr.cherryservers.net
Domain Name	ntt.lt
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 88.216.39.25

Whois 88.216.39.25

IP Abuse Reports for 88.216.39.25:

This IP address has been reported a total of 34 times from 8 distinct sources. 88.216.39.25 was first reported on October 4th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-04-25 22:57:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 25 18:57:10.366298 2024] [security2:error] [pid 3953389] [client 88.216.39.25:54333] [client 88.216.39.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/old/sftp-config.json"] [unique_id "ZirfxtDGBe9qdsNOIXXQaQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-04-17 21:35:01 (2 years ago)	HEAD http://crm.marche-be.com/restore/www.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇪🇸 10dencehispahard SL	2024-04-09 09:00:45 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇩🇪 hbrks	2024-04-08 02:54:33 (2 years ago)	HEAD http://marche-be.com/backup/latest.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-04-08 02:28:45 (2 years ago)	HEAD http://crm.marche-be.com/archive.zip * statusCode: 503 *	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-01 23:52:26 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 01 19:52:20.872115 2024] [security2:error] [pid 16342] [client 88.216.39.25:53071] [client 88.216.39.25] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lusocleaningservice.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/old/dump.sql"] [unique_id "ZgtItG2T62RgSar4COOizQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-26 23:22:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 26 19:22:36.299642 2024] [security2:error] [pid 19610] [client 88.216.39.25:32237] [client 88.216.39.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/backups/.env"] [unique_id "ZgNYvD00wj3qPLxLPtDz3QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 www.wotcheats.ru	2024-03-23 01:37:00 (2 years ago)	/.git/HEAD	Web App Attack
🇩🇪 hbrks	2024-03-12 02:00:34 (2 years ago)	HEAD http://crm.marche-be.com/backup/public_html.rar statusCode: 503	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-03-07 01:01:49 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 06 20:01:42.432912 2024] [security2:error] [pid 12249] [client 88.216.39.25:50675] [client 88.216.39.25] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pellman-world.com\|F\|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pellman-world.com"] [uri "/backups/pellman-world.com.sql"] [unique_id "ZekR9uCxPIQSTW2bT5j6PgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-03-06 07:42:11 (2 years ago)	HEAD http://ncs.guru/backup/bak.zip statusCode: 503	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-03-05 13:58:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 88.216.39.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 05 08:58:13.023259 2024] [security2:error] [pid 22773] [client 88.216.39.25:50395] [client 88.216.39.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cryptoedge.net"] [uri "/backup/.env"] [unique_id "Zeck9ZPaqhDFD6ZPGWmLZQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-03-05 13:55:48 (2 years ago)	HEAD http://epay.world/old/application.zip statusCode: 503	Web Spam Hacking Bad Web Bot
🇩🇪 hbrks	2024-03-05 13:29:14 (2 years ago)	http://_/ statusCode: 400 user-agent:DDOS Attack	Web Spam Hacking Bad Web Bot
🇪🇸 10dencehispahard SL	2024-03-04 22:28:38 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c12::129

🇧🇷 205.210.31.223

🇧🇪 198.235.24.252

🇳🇱 185.224.128.16

🇧🇷 179.83.134.101

🇳🇱 172.71.98.102

🇩🇪 134.122.65.151

🇬🇧 87.236.176.230

🇺🇸 69.49.246.176

🇸🇬 194.61.40.202

🇮🇱 193.182.144.93

🇳🇱 185.136.15.13

🇺🇸 147.185.132.140

🇫🇷 91.196.152.194

🇳🇱 45.148.10.122

🇳🇱 45.142.193.161

🇸🇪 34.51.196.29

🇦🇪 20.74.177.114

🇯🇵 8.216.13.201

🇯🇵 219.117.219.36